activity
20182023
most citedBugs in Infrastructure as Code

2 citations · 3 across the 4 of their papers we have counts for

collaborators

5 papers

cs.CR2023

Comparing Effectiveness and Efficiency of Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) Tools in a Large Java-based System

Aishwarya Seth, Saikath Bhattacharya, Sarah Elder +2

Security resources are scarce, and practitioners need guidance in the effective and efficient usage of techniques and tools available in the cybersecurity industry. Two emerging to…

cs.SE2022★ 1 cited

Do I really need all this work to find vulnerabilities? An empirical case study comparing vulnerability detection techniques on a Java application

Sarah Elder, Nusrat Zahan, Rui Shu +4

CONTEXT: Applying vulnerability detection techniques is one of many tasks using the limited resources of a software project. OBJECTIVE: The goal of this research is to assist manag…

cs.SE2021

Vulnerability Detection is Just the Beginning

Sarah Elder

Vulnerability detection plays a key role in secure software development. There are many different vulnerability detection tools and techniques to choose from, and insufficient info…

cs.SE2021

Structuring a Comprehensive Software Security Course Around the OWASP Application Security Verification Standard

Sarah Elder, Nusrat Zahan, Val Kozarev +3

Lack of security expertise among software practitioners is a problem with many implications. First, there is a deficit of security professionals to meet current needs. Additionally…

cs.SE2018★ 2 cited

Bugs in Infrastructure as Code

Akond Rahman, Sarah Elder, Faysal Hossain Shezan +3

Infrastructure as code (IaC) scripts are used to automate the maintenance and configuration of software development and deployment infrastructure. IaC scripts can be complex in nat…